Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
File:                     tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft (raw, json)
Hash identifier:          XNOMkczkZIeVZyIOP3U48KPXEly6BHw3M8emaInOmsw=
Subject key identifier:   FB:8D:F5:85:F1:1C:96:45:5C:2B:D0:4A:8B:96:89:A2:07:C2:9F:F9
Authority key identifier: B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
Certificate issuer:       /CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Certificate serial:       01962E98C70C2258B80C73F17953511D93B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl (hash: i/0z9WUelTHplRMrSYBuwN8Ox32WfKSCdeKcxJCjaBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c7:0c:22:58:b8:0c:73:f1:79:53:51:1d:93:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=fb8df585f11c96455c2bd04a8b9689a207c29ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f5:f8:db:33:d2:f6:3a:ca:d3:26:8f:0f:b3:
                    f3:18:f2:d3:92:9e:e9:27:e5:c4:29:01:5a:8c:8e:
                    29:08:eb:c3:00:bd:28:ad:d1:36:66:ee:ff:59:ef:
                    3d:c9:f1:cb:4d:f8:df:e2:4e:bd:f8:79:c5:77:78:
                    fb:e0:7b:a8:eb:5a:44:36:46:fb:b8:af:48:fc:42:
                    1f:ef:d0:aa:35:14:ed:c0:01:41:70:1f:15:f6:f6:
                    85:2b:25:60:da:e3:87:82:2c:c0:18:48:09:89:bb:
                    a5:81:46:e2:3c:2b:e2:c8:6e:1f:fb:fb:82:e9:2c:
                    35:fb:8d:4f:b4:28:52:c8:8c:a5:c1:7f:3b:a5:82:
                    e4:17:79:f2:d1:df:03:45:74:cb:19:4e:fb:e0:39:
                    81:db:2f:86:da:bd:9d:45:d3:53:0d:6b:74:20:7d:
                    68:a3:5a:87:1d:7b:42:1c:0e:fc:40:0a:9f:b8:3d:
                    3a:2d:03:c6:f5:87:06:0b:d1:f0:e6:94:3d:e3:33:
                    f5:56:fb:a2:8e:14:a1:3a:d2:7b:28:f3:8f:15:95:
                    a1:61:d1:d7:95:93:1a:74:b2:a3:4b:fd:6e:ac:9d:
                    48:04:bc:39:06:6e:dc:09:d0:be:fb:b3:b2:a7:b9:
                    98:26:38:7f:ce:f4:23:0a:b9:5d:cd:3c:5a:73:73:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8D:F5:85:F1:1C:96:45:5C:2B:D0:4A:8B:96:89:A2:07:C2:9F:F9
            X509v3 Authority Key Identifier:
                keyid:B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:05:98:d6:03:8f:48:9d:ee:e8:ef:54:98:dd:ae:95:2a:7c:
         6f:1c:c2:2f:54:22:db:dc:b4:46:5b:9c:c9:36:15:3e:43:df:
         6f:f5:68:8e:53:cc:f6:7f:8e:7a:d3:df:5d:c5:5a:83:f7:25:
         69:64:0f:a6:a2:17:8d:cf:86:fd:20:2f:d2:5f:2e:fb:75:59:
         b3:4f:a7:08:c0:4c:f1:d2:dc:97:21:e3:d9:7e:71:e7:ae:3e:
         97:55:93:b6:94:ed:21:e1:f5:41:f6:0a:0b:99:57:fa:b6:54:
         22:e5:23:7a:05:44:b8:88:2e:a8:72:a5:d0:1c:75:54:cd:73:
         2d:3e:e3:d9:1a:5d:65:1f:34:0d:ec:f8:b2:e7:f6:8c:c5:48:
         d9:56:2e:2b:e2:b8:c0:6d:45:26:6d:bd:b9:0b:6c:0c:84:6b:
         6d:72:7b:dd:fb:54:10:80:a0:06:4b:2b:30:e8:d5:41:a9:8c:
         87:3a:d8:d2:be:91:c3:64:62:3d:2b:f0:ab:6d:ed:57:ca:76:
         45:0e:51:44:7a:f6:e8:82:eb:71:99:23:1d:cb:4b:b1:ec:b1:
         8f:cd:a0:bb:97:75:68:de:a5:5f:97:87:f5:c4:e5:d5:8e:04:
         9e:0f:de:ef:ab:6b:37:39:a5:b7:77:1f:02:61:a3:eb:3b:47:
         f4:7b:51:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMcMIli4DHPxeVNRHZOzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3M2Q4OGQ3NDY4YWY2MDFhZjE0YzVlMWVkOTAzYzRmMzZj
YWY1ZmEwHhcNMjUwNDEzMTAwMTI2WhcNMjUwNDE0MTAwMTI2WjAzMTEwLwYDVQQD
EyhmYjhkZjU4NWYxMWM5NjQ1NWMyYmQwNGE4Yjk2ODlhMjA3YzI5ZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvX42zPS9jrK0yaPD7PzGPLTkp7p
J+XEKQFajI4pCOvDAL0ordE2Zu7/We89yfHLTfjf4k69+HnFd3j74Huo61pENkb7
uK9I/EIf79CqNRTtwAFBcB8V9vaFKyVg2uOHgizAGEgJibulgUbiPCviyG4f+/uC
6Sw1+41PtChSyIylwX87pYLkF3ny0d8DRXTLGU774DmB2y+G2r2dRdNTDWt0IH1o
o1qHHXtCHA78QAqfuD06LQPG9YcGC9Hw5pQ94zP1VvuijhShOtJ7KPOPFZWhYdHX
lZMadLKjS/1urJ1IBLw5Bm7cCdC++7Oyp7mYJjh/zvQjCrldzTxac3PJ7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuN9YXxHJZFXCvQSouWiaIHwp/5MB8GA1UdIwQY
MBaAFLc9iNdGivYBrxTF4e2QPE82yvX6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHoySTEwYUs5Z0d2Rk1YaDdaQThUemJLOWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xOWM5M2ItYzlhMS00OTRiLTliYzAt
MGYyYjU0MGVjYTA4LzEvdHoySTEwYUs5Z0d2Rk1YaDdaQThUemJLOWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xOWM5M2ItYzlhMS00OTRiLTliYzAtMGYyYjU0MGVjYTA4
LzEvdHoySTEwYUs5Z0d2Rk1YaDdaQThUemJLOWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgWY1gOP
SJ3u6O9UmN2ulSp8bxzCL1Qi29y0RlucyTYVPkPfb/VojlPM9n+OetPfXcVag/cl
aWQPpqIXjc+G/SAv0l8u+3VZs0+nCMBM8dLclyHj2X5x564+l1WTtpTtIeH1QfYK
C5lX+rZUIuUjegVEuIguqHKl0Bx1VM1zLT7j2RpdZR80Dez4suf2jMVI2VYuK+K4
wG1FJm29uQtsDIRrbXJ73ftUEICgBksrMOjVQamMhzrY0r6Rw2RiPSvwq23tV8p2
RQ5RRHr26ILrcZkjHctLseyxj82gu5d1aN6lX5eH9cTl1Y4Eng/e76trNzmlt3cf
AmGj6ztH9HtRaQ==
-----END CERTIFICATE-----